Email: 476991 Autolearn: 0 AvgScore: 4.64 AvgScanTime: 1.42 sec Spam: 147592 Autolearn: 0 AvgScore: 14.65 AvgScanTime: 1.57 sec Ham: 329399 Autolearn: 0 AvgScore: 0.15 AvgScanTime: 1.36 sec Time Spent Running SA: 188.70 hours Time Spent Processing Spam: 64.49 hours Time Spent Processing Ham: 124.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 141048 90.11 95.57 87.66 2 DKIM_SIGNED 132006 78.94 89.44 74.24 3 XM_DK_Pass 125587 76.57 85.09 72.75 4 XM_B_Unicode 125394 75.61 84.96 71.43 5 DKIM_VALID 124318 75.52 84.23 71.61 6 RELAYCOUNTRY_US 122151 81.60 82.76 81.08 7 DCC_CHECK 112183 49.61 76.01 37.78 8 XM_B_SpammyWords 100325 53.85 67.97 47.52 9 XMListUnsubscribeExists 100018 54.40 67.77 48.41 10 DKIM_VALID_AU 98508 60.10 66.74 57.13 11 XM_B_Unicode3 75986 43.87 51.48 40.46 12 LOC_TINY_FONT_1 72681 34.29 49.24 27.58 13 RCVD_IN_MSPIKE_H2 62014 37.26 42.02 35.13 14 BAYES_50 59987 55.23 40.64 61.77 15 XM_B_SpammyWords2 58479 26.92 39.62 21.24 16 XM_DK_Undo_02 57640 15.03 39.05 4.27 17 HTML_FONT_LOW_CONTRAST 56974 30.31 38.60 26.60 18 FVGT_m_MULTI_ODD 48304 27.30 32.73 24.86 19 T_KAM_HTML_FONT_INVALID 46866 25.22 31.75 22.29 20 BAYES_99 44404 11.34 30.09 2.94 21 MIME_HTML_ONLY 44319 22.80 30.03 19.55 22 DKIM_VALID_EF 43545 28.87 29.50 28.58 23 TR_XM_DKIM_Undo 41128 10.04 27.87 2.05 24 XMSubLong 35484 22.87 24.04 22.35 25 BAYES_999 34102 8.70 23.11 2.25 26 DCC_CHECK_NEGATIVE 33211 49.90 22.50 62.17 27 T_TM2_M_HEADER_IN_MSG 32042 29.31 21.71 32.72 28 XM_Multi_Part_URI 32042 15.58 21.71 12.83 29 TR_DCC_Bayes_99 31844 7.47 21.58 1.16 30 TR_XM_DK_Unsub 30733 15.03 20.82 12.43 31 XM_B_Unsub 29400 12.34 19.92 8.95 32 TR_XM_BayesUnsub 28441 10.63 19.27 6.75 33 UNPARSEABLE_RELAY 27293 13.79 18.49 11.68 34 RELAYCOUNTRY_META 22935 7.45 15.54 3.83 35 TR_MAX_INTL_RELAY 22450 8.24 15.21 5.12 36 XM_B_SpammyWords3 21036 8.90 14.25 6.51 37 LOTS_OF_MONEY 18052 8.72 12.23 7.15 38 BOTNET_IPINHOSTNAME 16402 5.55 11.11 3.06 39 TR_XM_SpammyWords2 16142 3.70 10.94 0.46 40 TR_XM_SpammyRelay 15971 4.83 10.82 2.15 41 FSL_BULK_SIG 15675 8.24 10.62 7.18 42 TR_XM_SpammyWords4 15478 6.77 10.49 5.10 43 XM_Evil_Numbers_Gen 14836 8.92 10.05 8.42 44 TR_XM_UnparsRelay 14245 4.05 9.65 1.54 45 BAYES_80 13879 5.10 9.40 3.17 46 RCVD_IN_BL_SPAMCOP_NET 13324 3.14 9.03 0.50 47 BOTNET 13070 3.71 8.86 1.41 48 BAYES_60 12064 7.21 8.17 6.77 49 XMSubMetaSx_00 12033 5.29 8.15 4.01 50 XM_B_Phish_Phrases 11909 7.28 8.07 6.92 51 T_SCC_BODY_TEXT_LINE 11570 8.28 7.84 8.47 52 LotsOfNums_01 11091 7.78 7.51 7.90 53 TR_XM_SPAMCOP 11081 2.50 7.51 0.26 54 HTML_IMAGE_RATIO_02 10939 5.41 7.41 4.52 55 XM_Body_Dirty_Words 10915 4.11 7.40 2.64 56 UNTRUSTED_Relay 10051 3.13 6.81 1.48 57 MPART_ALT_DIFF 9402 5.10 6.37 4.53 58 XM_B_PhoneNumber 9120 8.70 6.18 9.84 59 XM_UncommonTLD01 9022 4.68 6.11 4.04 60 HTML_IMAGE_RATIO_04 8157 4.64 5.53 4.24 61 BAYES_95 8027 3.03 5.44 1.95 62 XMSexyCombo_05 7964 2.61 5.40 1.37 63 DKIM_INVALID 7688 3.42 5.21 2.62 64 RELAYCOUNTRY_CA 7682 2.27 5.20 0.96 65 XM_H_Long_From01 7563 5.66 5.12 5.90 66 TR_XM_PhishingBody 6629 2.60 4.49 1.75 67 XM_H_GMP 6581 5.31 4.46 5.68 68 XMStrtUSub 6067 4.48 4.11 4.64 69 T_XMDrugObfuBody_14 5988 2.92 4.06 2.41 70 XM_B_SpammyTLD 5868 3.12 3.98 2.73 71 XM_B_Investor 5802 2.30 3.93 1.57 72 TooManyTo_001 5651 7.03 3.83 8.47 73 TM2_M_VERY_LONG_WORD 5434 3.53 3.68 3.47 74 MIME_HTML_MOSTLY 5419 2.59 3.67 2.10 75 XMNumbers 5417 3.09 3.67 2.84 76 T_XMDrugObfuBody_08 4884 2.22 3.31 1.74 77 HTML_IMAGE_RATIO_06 4806 3.30 3.26 3.33 78 TR_XM_SpammyWords5 4717 1.81 3.20 1.18 79 TM2_M_URI_OPT_OUT 4647 2.24 3.15 1.83 80 MIME_HTML_ONLY_MULTI 4647 2.88 3.15 2.76 81 XM_SPF_SoftFail 4620 1.92 3.13 1.38 82 XM_UB50 4607 1.61 3.12 0.93 83 XM_CamelCaseFrm001 4524 2.42 3.07 2.13 84 XMDiploma_00 4496 1.82 3.05 1.27 85 RCVD_IN_MSPIKE_WL 4454 4.70 3.02 5.45 86 RCVD_IN_MSPIKE_H3 4454 4.70 3.02 5.45 87 MIME_QP_LONG_LINE 4365 4.48 2.96 5.16 88 XM_B_Unsub2 4312 1.94 2.92 1.50 89 XM_OfRef6 4079 1.50 2.76 0.93 90 TR_XM_NoHeaderRelay 4003 1.00 2.71 0.23 91 MAILING_LIST_MULTI 3932 2.79 2.66 2.85 92 XM_B_URI_Unicode 3896 2.28 2.64 2.11 93 RELAYCOUNTRY_AU 3721 1.33 2.52 0.80 94 XM_URI_RBL 3698 0.97 2.51 0.28 95 HTML_IMAGE_RATIO_08 3673 2.22 2.49 2.10 96 T_TooManySym_01 3530 4.66 2.39 5.67 97 T_REMOTE_IMAGE 3361 3.20 2.28 3.61 98 T_XMHurry_00 3356 1.04 2.27 0.49 99 TR_XM_INV_DKIM 3335 0.86 2.26 0.23 100 HTML_MIME_NO_HTML_TAG 3318 2.48 2.25 2.59 101 SpammyFromTLD_02 3290 1.03 2.23 0.49 102 RCVD_IN_VALIDITY_RPBL 3257 0.74 2.21 0.08 103 ALL_TRUSTED 3234 11.65 2.19 15.88 104 RCVD_IN_VALIDITY_SAFE 3230 3.29 2.19 3.79 105 XMStockSpam_06 3065 1.55 2.08 1.32 106 XM_B_SpammyWords4 3049 1.01 2.07 0.54 107 FROM_EXCESS_BASE64 2965 2.03 2.01 2.04 108 XMBody_17 2857 0.87 1.94 0.39 109 T_XMDrugObfuBody_00 2830 1.10 1.92 0.74 110 XM_H_Long_From02 2798 1.13 1.90 0.79 111 USER_IN_DEF_DKIM_WL 2744 9.55 1.86 12.99 112 KHOP_HELO_FCRDNS 2727 2.20 1.85 2.36 113 RCVD_IN_PSBL 2681 0.70 1.82 0.19 114 BAYES_40 2651 4.66 1.80 5.94 115 XM_DK_Undo_01 2598 1.87 1.76 1.92 116 RCVD_IN_PBL 2553 0.97 1.73 0.64 117 XMGenDplmaNmb 2541 1.04 1.72 0.73 118 T_FILL_THIS_FORM_SHORT 2468 1.33 1.67 1.18 119 RCVD_IN_VALIDITY_CERTIFIED 2466 2.70 1.67 3.16 120 XM_SendGrid 2433 1.48 1.65 1.41 121 SpammyFromTLD_01 2433 1.06 1.65 0.80 122 XMBrknScrpt_02 2278 0.96 1.54 0.69 123 TR_LOTS_OF_MONEY3 2264 0.73 1.53 0.37 124 RCVD_IN_ZEN_LASTEXTERNAL 2181 0.46 1.48 0.00 125 SHORTCIRCUIT 2181 0.46 1.48 0.00 126 URI_TRY_3LD 2176 0.85 1.47 0.57 127 BAYES_20 2151 3.20 1.46 3.99 128 URI_HEX 2120 1.23 1.44 1.13 129 SUBJ_ALL_CAPS 2084 1.44 1.41 1.45 130 TR_MetaPhish_Combo_01 2079 0.94 1.41 0.73 131 HTTPS_HTTP_MISMATCH 2063 0.90 1.40 0.68 132 LongTLD 2047 0.76 1.39 0.48 133 XM_B_COPY_HTML 1955 0.91 1.32 0.72 134 XMPhish30 1950 0.81 1.32 0.58 135 DKIM_ADSP_NXDOMAIN 1897 0.63 1.29 0.33 136 TR_XM_PHPDW 1897 0.64 1.29 0.36 137 XMSubMetaSSx_00 1894 0.61 1.28 0.30 138 TR_XM_PHPForged 1890 0.63 1.28 0.34 139 RELAYCOUNTRY_FR 1881 0.56 1.27 0.24 140 ANY_BOUNCE_MESSAGE 1861 4.09 1.26 5.35 141 BOUNCE_MESSAGE 1859 4.09 1.26 5.35 142 XM_B_Phish66 1858 0.64 1.26 0.36 143 TR_XM_FormFill2 1851 0.63 1.25 0.35 144 XMBdyGiftCard01 1841 1.22 1.25 1.20 145 XM_H_PHPOS 1820 0.61 1.23 0.33 146 HTML_FONT_TINY_NORDNS 1789 0.42 1.21 0.07 147 DIET_1 1714 0.60 1.16 0.35 148 MPART_ALT_DIFF_COUNT 1680 0.78 1.14 0.62 149 XM_DIRTYINTL 1680 0.41 1.14 0.09 150 XM_UB99 1671 0.35 1.13 0.00 151 XMBody_78 1656 0.62 1.12 0.40 152 TR_XM_SEO4 1606 0.41 1.09 0.10 153 RDNS_DYNAMIC 1604 0.50 1.09 0.23 154 TR_Mismatch_TLD_02 1603 0.41 1.09 0.11 155 XM_RXBody 1589 0.48 1.08 0.21 156 SHOPIFY_IMG_NOT_RCVD_SFY 1577 0.50 1.07 0.25 157 XM_ProductURIs 1558 0.64 1.06 0.46 158 DKIM_ADSP_CUSTOM_MED 1549 0.93 1.05 0.88 159 MultiRelay_CC 1535 0.42 1.04 0.14 160 XM_B_SEO 1528 0.46 1.04 0.20 161 TR_XM_DK_SendGrid 1497 0.94 1.01 0.90 162 T_STY_INVIS_DIRECT 1465 0.63 0.99 0.47 163 HTML_TAG_BALANCE_BODY 1455 0.68 0.99 0.55 164 TR_XM_RelayPhish 1448 0.37 0.98 0.09 165 XMSubMetaI_00 1440 0.59 0.98 0.42 166 XMMoneyMeta_00 1438 0.67 0.97 0.53 167 PDS_RDNS_DYNAMIC_FP 1428 0.37 0.97 0.10 168 XMHTML_After_End 1420 0.57 0.96 0.39 169 XM_B_REG_HTML 1409 0.44 0.95 0.21 170 URIBL_BLACK 1381 0.33 0.94 0.06 171 XM_PDF 1375 3.53 0.93 4.69 172 TR_Symld_Words 1373 1.36 0.93 1.56 173 XM_B_DNDMA 1370 0.79 0.93 0.73 174 URI_NOVOWEL 1363 1.66 0.92 2.00 175 TVD_RCVD_IP 1353 0.72 0.92 0.63 176 NML_ADSP_CUSTOM_MED 1341 0.69 0.91 0.59 177 TM2_M_OBFU_COMMENT 1322 0.47 0.90 0.28 178 HTML_IMAGE_ONLY_20 1319 0.68 0.89 0.58 179 RELAYCOUNTRY_GB 1308 0.63 0.89 0.52 180 XM_B_COVIDMETA 1295 0.41 0.88 0.20 181 TM2_M_A_HREF_HREF 1290 0.44 0.87 0.25 182 BOTNET_NORDNS 1272 0.28 0.86 0.01 183 XMSexyCombo_01 1263 0.38 0.86 0.17 184 RCVD_IN_IADB_LISTED 1250 2.87 0.85 3.77 185 TR_LOTS_OF_MONEY2 1238 0.38 0.84 0.18 186 T_MONEY_PERCENT 1238 0.38 0.84 0.18 187 XMPhish14 1235 0.58 0.84 0.47 188 XM_HighProb1 1229 0.26 0.83 0.00 189 BAYES_00 1227 7.88 0.83 11.04 190 XM_UB60 1222 0.31 0.83 0.07 191 XM_UB999 1212 0.26 0.82 0.00 192 XMReplyNow 1209 0.42 0.82 0.24 193 T_Symld_Words_02 1180 0.65 0.80 0.58 194 RCVD_IN_IADB_SPF 1178 2.51 0.80 3.28 195 RELAYCOUNTRY_DE 1156 0.48 0.78 0.34 196 TR_XM_InvalidRelay 1147 0.25 0.78 0.01 197 RCVD_IN_IADB_DK 1145 2.19 0.78 2.82 198 RCVD_IN_IADB_SENDERID 1132 2.25 0.77 2.92 199 XM_UB80 1122 0.25 0.76 0.02 200 XMSlimDrugH 1111 0.64 0.75 0.59 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 288749 90.11 95.57 87.66 2 RELAYCOUNTRY_US 267075 81.60 82.76 81.08 3 DKIM_SIGNED 244532 78.94 89.44 74.24 4 XM_DK_Pass 239628 76.57 85.09 72.75 5 DKIM_VALID 235899 75.52 84.23 71.61 6 XM_B_Unicode 235276 75.61 84.96 71.43 7 DCC_CHECK_NEGATIVE 204800 49.90 22.50 62.17 8 BAYES_50 203456 55.23 40.64 61.77 9 DKIM_VALID_AU 188170 60.10 66.74 57.13 10 XMListUnsubscribeExists 159468 54.40 67.77 48.41 11 XM_B_SpammyWords 156529 53.85 67.97 47.52 12 XM_B_Unicode3 133279 43.87 51.48 40.46 13 DCC_CHECK 124438 49.61 76.01 37.78 14 RCVD_IN_MSPIKE_H2 115702 37.26 42.02 35.13 15 T_TM2_M_HEADER_IN_MSG 107784 29.31 21.71 32.72 16 DKIM_VALID_EF 94149 28.87 29.50 28.58 17 LOC_TINY_FONT_1 90863 34.29 49.24 27.58 18 HTML_FONT_LOW_CONTRAST 87617 30.31 38.60 26.60 19 FVGT_m_MULTI_ODD 81905 27.30 32.73 24.86 20 XMSubLong 73625 22.87 24.04 22.35 21 T_KAM_HTML_FONT_INVALID 73435 25.22 31.75 22.29 22 XM_B_SpammyWords2 69949 26.92 39.62 21.24 23 MIME_HTML_ONLY 64413 22.80 30.03 19.55 24 ALL_TRUSTED 52314 11.65 2.19 15.88 25 USER_IN_DEF_DKIM_WL 42797 9.55 1.86 12.99 26 XM_Multi_Part_URI 42270 15.58 21.71 12.83 27 TR_XM_DK_Unsub 40937 15.03 20.82 12.43 28 UNPARSEABLE_RELAY 38487 13.79 18.49 11.68 29 BAYES_00 36375 7.88 0.83 11.04 30 XM_B_PhoneNumber 32398 8.70 6.18 9.84 31 XM_B_Unsub 29466 12.34 19.92 8.95 32 T_SCC_BODY_TEXT_LINE 27904 8.28 7.84 8.47 33 TooManyTo_001 27898 7.03 3.83 8.47 34 XM_Evil_Numbers_Gen 27728 8.92 10.05 8.42 35 LotsOfNums_01 26019 7.78 7.51 7.90 36 TR_XM_DK_Bayes 23912 5.22 0.67 7.26 37 FSL_BULK_SIG 23638 8.24 10.62 7.18 38 LOTS_OF_MONEY 23565 8.72 12.23 7.15 39 TR_XM_DK_Bayes1 23370 5.10 0.66 7.09 40 XM_B_Phish_Phrases 22803 7.28 8.07 6.92 41 XM_DKIMWhitelistDomains 22400 4.70 0.01 6.80 42 BAYES_60 22314 7.21 8.17 6.77 43 TR_XM_BayesUnsub 22241 10.63 19.27 6.75 44 IN_ZIMBRA_NJ_WHITELIST 21874 4.63 0.15 6.64 45 XM_B_SpammyWords3 21440 8.90 14.25 6.51 46 BAYES_40 19561 4.66 1.80 5.94 47 TR_XM_DK_Bayes2 19547 4.28 0.58 5.93 48 XM_H_Long_From01 19421 5.66 5.12 5.90 49 XM_H_GMP 18724 5.31 4.46 5.68 50 T_TooManySym_01 18679 4.66 2.39 5.67 51 RCVD_IN_MSPIKE_WL 17949 4.70 3.02 5.45 52 RCVD_IN_MSPIKE_H3 17949 4.70 3.02 5.45 53 ANY_BOUNCE_MESSAGE 17636 4.09 1.26 5.35 54 BOUNCE_MESSAGE 17634 4.09 1.26 5.35 55 MIME_QP_LONG_LINE 16991 4.48 2.96 5.16 56 TR_MAX_INTL_RELAY 16866 8.24 15.21 5.12 57 TR_XM_SpammyWords4 16807 6.77 10.49 5.10 58 XM_PDF 15462 3.53 0.93 4.69 59 XMStrtUSub 15285 4.48 4.11 4.64 60 MPART_ALT_DIFF 14928 5.10 6.37 4.53 61 HTML_IMAGE_RATIO_02 14885 5.41 7.41 4.52 62 XM_DK_Undo_02 14062 15.03 39.05 4.27 63 HTML_IMAGE_RATIO_04 13960 4.64 5.53 4.24 64 XM_UncommonTLD01 13312 4.68 6.11 4.04 65 XMSubMetaSx_00 13222 5.29 8.15 4.01 66 BAYES_20 13135 3.20 1.46 3.99 67 RELAYCOUNTRY_META 12612 7.45 15.54 3.83 68 RCVD_IN_VALIDITY_SAFE 12474 3.29 2.19 3.79 69 RCVD_IN_IADB_LISTED 12425 2.87 0.85 3.77 70 T_REMOTE_IMAGE 11905 3.20 2.28 3.61 71 TM2_M_VERY_LONG_WORD 11426 3.53 3.68 3.47 72 HTML_IMAGE_RATIO_06 10954 3.30 3.26 3.33 73 RCVD_IN_IADB_SPF 10811 2.51 0.80 3.28 74 BAYES_80 10439 5.10 9.40 3.17 75 RCVD_IN_VALIDITY_CERTIFIED 10393 2.70 1.67 3.16 76 BOTNET_IPINHOSTNAME 10089 5.55 11.11 3.06 77 T_TooManySym_02 9912 2.27 0.62 3.01 78 BAYES_99 9685 11.34 30.09 2.94 79 RCVD_IN_IADB_SENDERID 9604 2.25 0.77 2.92 80 MAILING_LIST_MULTI 9389 2.79 2.66 2.85 81 XMNumbers 9342 3.09 3.67 2.84 82 RCVD_IN_IADB_DK 9290 2.19 0.78 2.82 83 TooManyTo_002 9227 2.10 0.53 2.80 84 MIME_HTML_ONLY_MULTI 9106 2.88 3.15 2.76 85 XM_B_SpammyTLD 8991 3.12 3.98 2.73 86 XM_Body_Dirty_Words 8687 4.11 7.40 2.64 87 DKIM_INVALID 8633 3.42 5.21 2.62 88 RCVD_IN_IADB_VOUCHED 8625 1.91 0.32 2.62 89 HTML_MIME_NO_HTML_TAG 8522 2.48 2.25 2.59 90 HTML_EXTRA_CLOSE 8131 1.71 0.03 2.47 91 BAYES_05 8004 1.89 0.69 2.43 92 T_XMDrugObfuBody_14 7923 2.92 4.06 2.41 93 KHOP_HELO_FCRDNS 7787 2.20 1.85 2.36 94 BAYES_999 7408 8.70 23.11 2.25 95 INVALID_MSGID 7326 1.61 0.25 2.22 96 MAY_BE_FORGED 7280 1.53 0.02 2.21 97 TR_XM_SpammyRelay 7091 4.83 10.82 2.15 98 XM_CamelCaseFrm001 7006 2.42 3.07 2.13 99 XM_B_URI_Unicode 6963 2.28 2.64 2.11 100 MIME_HTML_MOSTLY 6929 2.59 3.67 2.10 101 HTML_IMAGE_RATIO_08 6901 2.22 2.49 2.10 102 TR_XM_DKIM_Undo 6767 10.04 27.87 2.05 103 FROM_EXCESS_BASE64 6707 2.03 2.01 2.04 104 URI_NOVOWEL 6574 1.66 0.92 2.00 105 BAYES_95 6416 3.03 5.44 1.95 106 XM_DK_Undo_01 6311 1.87 1.76 1.92 107 TO_MALFORMED 6269 1.33 0.04 1.90 108 TM2_M_URI_OPT_OUT 6029 2.24 3.15 1.83 109 RCVD_IN_IADB_OPTIN 5806 1.28 0.22 1.76 110 TR_XM_PhishingBody 5766 2.60 4.49 1.75 111 T_XMDrugObfuBody_08 5717 2.22 3.31 1.74 112 XM_B_Investor 5179 2.30 3.93 1.57 113 TooManyTo_003 5141 1.22 0.47 1.56 114 TR_Symld_Words 5130 1.36 0.93 1.56 115 TR_XM_UnparsRelay 5086 4.05 9.65 1.54 116 XM_B_Unsub2 4949 1.94 2.92 1.50 117 UNTRUSTED_Relay 4886 3.13 6.81 1.48 118 SUBJ_ALL_CAPS 4789 1.44 1.41 1.45 119 XM_SendGrid 4642 1.48 1.65 1.41 120 BOTNET 4639 3.71 8.86 1.41 121 XM_SPF_SoftFail 4541 1.92 3.13 1.38 122 XMSexyCombo_05 4497 2.61 5.40 1.37 123 HELO_NODOT 4394 0.99 0.24 1.33 124 HELO_NO_DOMAIN 4386 0.96 0.14 1.33 125 IN_HORDE_ADDRESS_BOOK 4353 0.95 0.11 1.32 126 XMStockSpam_06 4346 1.55 2.08 1.32 127 XM_GoogleGroups 4290 1.11 0.68 1.30 128 XMDiploma_00 4193 1.82 3.05 1.27 129 XMGappySubj_01 4014 0.95 0.35 1.22 130 XMBdyGiftCard01 3960 1.22 1.25 1.20 131 TR_XM_SpammyWords5 3901 1.81 3.20 1.18 132 T_FILL_THIS_FORM_SHORT 3893 1.33 1.67 1.18 133 TR_DCC_Bayes_99 3808 7.47 21.58 1.16 134 T_TooManySym_03 3796 0.87 0.22 1.15 135 XMCapTrack 3741 0.91 0.40 1.14 136 URI_HEX 3735 1.23 1.44 1.13 137 TooManyTo_004 3588 0.88 0.40 1.09 138 TVD_SPACE_RATIO 3313 0.78 0.26 1.01 139 RELAYCOUNTRY_CA 3148 2.27 5.20 0.96 140 XM_OfRef6 3078 1.50 2.76 0.93 141 XM_UB50 3067 1.61 3.12 0.93 142 TooManyTo_005 3003 0.74 0.36 0.91 143 TR_XM_DK_SendGrid 2980 0.94 1.01 0.90 144 DKIM_ADSP_CUSTOM_MED 2893 0.93 1.05 0.88 145 XM_ShortIntro_01 2748 0.78 0.66 0.83 146 SpammyFromTLD_01 2636 1.06 1.65 0.80 147 RELAYCOUNTRY_AU 2628 1.33 2.52 0.80 148 FROM_GOV_DKIM_AU 2627 0.61 0.19 0.80 149 XM_H_Long_From02 2612 1.13 1.90 0.79 150 XM_H_PHPMailer 2467 0.69 0.57 0.75 151 T_XMDrugObfuBody_00 2428 1.10 1.92 0.74 152 XM_B_DNDMA 2421 0.79 0.93 0.73 153 TR_MetaPhish_Combo_01 2409 0.94 1.41 0.73 154 XMGenDplmaNmb 2405 1.04 1.72 0.73 155 XM_B_COPY_HTML 2362 0.91 1.32 0.72 156 XMBrknScrpt_02 2283 0.96 1.54 0.69 157 HTTPS_HTTP_MISMATCH 2249 0.90 1.40 0.68 158 T_OBFU_PDF_ATTACH 2226 0.52 0.17 0.68 159 XMGappySubj_02 2222 0.49 0.07 0.67 160 TO_NO_BRKTS_HTML_ONLY 2188 0.62 0.53 0.66 161 RCVD_IN_PBL 2093 0.97 1.73 0.64 162 TR_XM_Base64_M1 2092 0.67 0.75 0.64 163 MSGID_FROM_MTA_HEADER 2071 0.48 0.14 0.63 164 TVD_RCVD_IP 2060 0.72 0.92 0.63 165 MPART_ALT_DIFF_COUNT 2028 0.78 1.14 0.62 166 XMSlimDrugH 1959 0.64 0.75 0.59 167 NML_ADSP_CUSTOM_MED 1941 0.69 0.91 0.59 168 XMNoVowels 1925 0.54 0.45 0.58 169 T_Symld_Words_02 1919 0.65 0.80 0.58 170 XMBody_95 1918 0.46 0.20 0.58 171 PLING_QUERY 1910 0.60 0.65 0.58 172 XMPhish30 1906 0.81 1.32 0.58 173 HTML_IMAGE_ONLY_20 1904 0.68 0.89 0.58 174 URI_TRY_3LD 1885 0.85 1.47 0.57 175 XM_B_FormFill 1879 0.40 0.01 0.57 176 FORGED_GMAIL_RCVD 1844 0.62 0.75 0.56 177 XMLngstWrd_00 1825 0.51 0.42 0.55 178 HTML_TAG_BALANCE_BODY 1806 0.68 0.99 0.55 179 XM_B_SpammyWords4 1774 1.01 2.07 0.54 180 XMMoneyMeta_00 1762 0.67 0.97 0.53 181 RELAYCOUNTRY_GB 1698 0.63 0.89 0.52 182 XMBSHREFv2 1679 0.48 0.40 0.51 183 RCVD_IN_BL_SPAMCOP_NET 1654 3.14 9.03 0.50 184 T_XMHurry_00 1611 1.04 2.27 0.49 185 SpammyFromTLD_02 1603 1.03 2.23 0.49 186 LongTLD 1572 0.76 1.39 0.48 187 XMPhish14 1549 0.58 0.84 0.47 188 T_STY_INVIS_DIRECT 1549 0.63 0.99 0.47 189 TR_XM_SpammyWords2 1529 3.70 10.94 0.46 190 XM_ProductURIs 1517 0.64 1.06 0.46 191 HTML_IMAGE_ONLY_32 1490 0.39 0.24 0.45 192 XMDateMe_00 1487 0.47 0.50 0.45 193 XMLngstWrd_01 1427 0.41 0.37 0.43 194 HELO_MISC_IP 1382 0.31 0.06 0.42 195 XMSubMetaI_00 1377 0.59 0.98 0.42 196 XMSolicitRefs_0 1358 0.42 0.44 0.41 197 HTML_IMAGE_ONLY_28 1352 0.38 0.33 0.41 198 SHORT_HELO_AND_INLINE_IMAGE 1346 0.30 0.05 0.41 199 MISSING_HEADERS 1342 0.51 0.72 0.41 200 XMBody_78 1322 0.62 1.12 0.40 ----------------------------------------------------------------------